Medium severity · published Jul 19, 2024
CVE-2024-24970
Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application Enabling Software Driver which might allow escalation of…
6.5
CVSS
0.1%
EPSS
No
On KEV
Description
Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application Enabling Software Driver which might allow escalation of privilege.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HD
HP Display Control · HP Inc.
See HP Security Bulletin reference for affected versions. · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-24970
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-24970
support.hp.com
https://support.hp.com/us-en/document/ish_10914875-10914901-16/hpsbhf03954
More from HP Display Control
6.5
CVE-2024-29080
Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application Enabling Software Driver which might allow escalation of…